Comarch
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| ERP XL | 3 | – | Feb 15, 2024 |
| ERP Optima | 2 | – | May 14, 2026 |
Exploited and recent CVEs
- CVE-2025-68420 Privilege Escalation in Comarch ERP Optima 0.1%
- CVE-2025-68421 Hardcoded credentials in Comarch ERP Optima 0.2%
- CVE-2023-4539 Hardcoded password in Comarch ERP XL 0.5%
- CVE-2023-4538 Shared Key in Comarch ERP XL 0.4%
- CVE-2023-4537 Protocol Downgrade in Comarch ERP XL 0.6%